• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 403
  • Last Modified:

Start/Restart Services Permissions

What are the minimum permissions I need to grant for a user to connect to a Windows 2003 Domain Controller using the services mmc console to start and/or restart services?
  • 2
1 Solution
You first need to grant them the necessary permissions (read/start/stop/pause, RTOP in subinacl.exe), either through a group policy or through subinacl.exe
Check here for details:
How to grant users rights to manage services in Windows 2000

Download details: SubInACL (SubInACL.exe)

In addition, you need the following for remote access:
Non-administrators cannot remotely access the Service Control Manager after you install Windows Server 2003 Service Pack 1
DVation191Author Commented:
I have granted the appropriate permissions using SubInACL for the services themselves, but the user still cannot connect to the services using the mmc console remotely.

The last link you provided describes using sc.exe, but I want the user to be able to use the MMC console. Am I missing something?
You need to run the command described in the 907460 article *once* on the server that hosts the service(s) you want to grant remote access to.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now